by ruvnet
Easily switch between alternative low-cost AI models in Claude Code/Agent SDK. For those comfortable using Claude agents and commands, it lets you take what you've created and deploy fully hosted agents for real business purposes. Use Claude Code to get the agent working, then deploy it in your favorite cloud.
# Add to your Claude Code skills
git clone https://github.com/ruvnet/agentic-flowLast scanned: 5/8/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@anthropic-ai/claude-code: Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@isaacs/brace-expansion: @isaacs/brace-expansion has Uncontrolled Resource Consumption",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/eslint-plugin: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/parser: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/type-utils: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/typescript-estree: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/utils: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "0x: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "axios: Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig",
"severity": "high"
},
{
"type": "npm-audit",
"message": "bn.js: bn.js affected by an infinite loop",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "browserify-sign: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "create-ecdh: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "crypto-browserify: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "d3-color: d3-color vulnerable to ReDoS",
"severity": "high"
},
{
"type": "npm-audit",
"message": "d3-fg: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "d3-interpolate: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "d3-scale: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "d3-transition: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "d3-zoom: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "elliptic: Elliptic Uses a Cryptographic Primitive with a Risky Implementation",
"severity": "low"
},
{
"type": "npm-audit",
"message": "express-rate-limit: express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting on servers with dual-stack network",
"severity": "high"
},
{
"type": "npm-audit",
"message": "file-type: file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Denial of Service via sequential optional groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "react-router: React Router has CSRF issue in Action/Server Action Request Processing",
"severity": "high"
},
{
"type": "npm-audit",
"message": "react-router-dom: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "undici: Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
},
{
"type": "npm-audit",
"message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-08T06:00:24.843Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Production-ready AI agent orchestration with 66 self-learning agents, 213 MCP tools, and autonomous multi-agent swarms.
# 1. Initialize your project
npx agentic-flow init
# 2. Bootstrap intelligence from your codebase
npx agentic-flow hooks pretrain
# 3. Start Claude Code with self-learning hooks
claude
That's it! Your project now has:
# Route a task to the optimal agent
npx agentic-flow hooks route "implement user authentication"
# View learning metrics
npx agentic-flow hooks metrics
# Dispatch background workers
npx agentic-flow workers dispatch "ultralearn how caching works"
# Run MCP server for Claude Code
npx agentic-flow mcp start
import { AgenticFlow } from 'agentic-flow';
const flow = new AgenticFlow();
await flow.initialize();
// Route task to best agent
const result = await flow.route('Fix the login bug');
console.log(`Best agent: ${result.agent} (${result.confidence}% confidence)`);
Agentic-Flow v2 now includes SONA (@ruvector/sona) for sub-millisecond adaptive learning:
Latest AgentDB release includes groundbreaking memory optimizations:
ADR-072 Phase 1 Complete: Full RuVector advanced features integration
Agentic-Flow v2 now includes ALL advanced vector/graph, GNN, and attention capabilities from AgentDB@alpha v2.0.0-alpha.2.11:
Performance Grade: A+ (100% Pass Rate)
Adaptive Learning (<1ms Overhead)
LoRA Fine-Tuning (99% Parameter Reduction)
Continual Learning (EWC++)
LLM Router (60% Cost Savings)
Quality Improvements by Domain:
5 Configuration Profiles:
Flash Attention (Production-Ready)
Multi-Head Attention (Standard Transformer)
Linear Attention (Scalable)
Hyperbolic Attention (Hierarchical)
MoE Attention (Expert Routing)
GraphRoPE (Topology-Aware)
All agents now feature v2.0.0-alpha self-learning capabilities:
Core Development (Self-Learning Enabled)
coder - Learns code patterns, implements faster with GNN contextreviewer - Pattern-based issue detection, attention consensus reviewstester - Learns from test failures, generates comprehensive testsplanner - MoE routing for optimal agent assignmentresearcher - GNN-enhanced pattern recognition, attention synthesisSwarm Coordination (Advanced Attention Mechanisms)
hierarchical-coordinator - Hyperbolic attention for queen-worker modelsmesh-coordinator - Multi-head attention for peer consensusadaptive-coordinator - Dynamic mechanism selection (flash/multi-head/linear/hyperbolic/moe)collective-intelligence-coordinator - Distributed memory coordinationswarm-memory-manager - Cross-agent learning patternsConsensus & Distributed
byzantine-coordinator, raft-manager, gossip-coordinatorcrdt-synchronizer, quorum-manager, security-managerPerformance & Optimization
perf-analyzer, performance-benchmarker, task-orchestratormemory-coordinator, smart-agentGitHub & Repository (Intelligent Code Analysis)
pr-manager - Smart merge strategies, attention-based conflict resolutioncode-review-swarm - Pattern-based issue detection, GNN code searchissue-tracker - Smart classification, attention priority rankingrelease-manager - Deployment strategy selection, risk assessmentworkflow-automation - Pattern-based workflow generationSPARC Methodology (Continuous Improvement)
specification - Learn from past specs, GNN requirement analysispseudocode - Algorithm pattern library, MoE optimizationarchitecture - Flash attention for large docs, pattern-based designrefinement - Learn from test failures, pattern-based refactoringAnd 40+ more specialized agents, all with self-learning!
swarm_init, agent_spawn, task_orchestratememory_usage, neural_train, neural_patternsgithub_repo_analyze, github_pr_managebenchmark_run, bottleneck_analyze, token_usage🧠 ReasoningBank Learning Memory: All 66 agents learn from every task execution
🎯 Self-Learning Agents: Every agent improves autonomously
⚡ Flash Attention Processing: 2.49x-7.47x faster execution
🤝 Intelligent Coordination: Better than simple voting